diff --git a/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/SunJaasKerberosTicketValidator.java b/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/SunJaasKerberosTicketValidator.java index e3085ba..3988a7f 100644 --- a/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/SunJaasKerberosTicketValidator.java +++ b/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/SunJaasKerberosTicketValidator.java @@ -112,6 +112,7 @@ public class SunJaasKerberosTicketValidator implements KerberosTicketValidator, public LoginConfig(String keyTabLocation, String servicePrincipalName, boolean debug) { this.keyTabLocation = keyTabLocation; this.servicePrincipalName = servicePrincipalName; + this.debug = debug; } @Override @@ -125,7 +126,7 @@ public class SunJaasKerberosTicketValidator implements KerberosTicketValidator, if (this.debug) { options.put("debug", "true"); } - options.put("isInitiator", "true"); + options.put("isInitiator", "false"); return new AppConfigurationEntry[] { new AppConfigurationEntry("com.sun.security.auth.module.Krb5LoginModule", AppConfigurationEntry.LoginModuleControlFlag.REQUIRED, options), }; diff --git a/spring-security-kerberos-sample/src/main/webapp/WEB-INF/security.xml b/spring-security-kerberos-sample/src/main/webapp/WEB-INF/security.xml index fb45cec..60662a3 100644 --- a/spring-security-kerberos-sample/src/main/webapp/WEB-INF/security.xml +++ b/spring-security-kerberos-sample/src/main/webapp/WEB-INF/security.xml @@ -13,9 +13,6 @@ - - @@ -30,8 +27,9 @@ - - + + +